github
8 Dtwo policies tagged "github", including Block Agent Edits to GitHub Actions Workflows, Block Secrets in GitHub Commits & PRs. Browse by what the control does rather than which app it targets.
Block Agent Edits to GitHub Actions WorkflowsStops the agent from creating, changing, or deleting GitHub Actions workflows and local actions.Block Secrets in GitHub Commits & PRsBlocks GitHub write tool calls whose payload looks like it carries a live credential into a repository, gist, pull request, or comment.Fence GitHub Access to the Company Org AllowlistDenies any GitHub tool call whose arguments.owner (read from input.payload.args.GitHub: Redact Secrets from Read ResponsesScans the responses of GitHub's crown-jewel read tools and masks known credential shapes with a fixed [REDACTED-SECRET] marker before the text enters agent…Prevent Public Exposure of GitHub Repos, Gists & ForksStops the agent from exposing private code to the public across three GitHub write tools, at ingress — before the call reaches the GitHub MCP server, so a…Protect the Default Branch from Direct Agent CommitsStops the agent from committing straight to main or master. Changes have to land on another branch and go through a pull request, where a person reviews them.Read-Only GitHub for Non-EngineersEstablishes the least-privilege baseline for the GitHub MCP connector on the agent channel.Require Human Approval: GitHub Merges & ApprovalsKeeps a human in the loop on the two GitHub actions that consummate a code change: merging a pull request and approving one .